Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431fd362-0df8-3142-bfdd-25c72ddb46f8.roa
File:                     431fd362-0df8-3142-bfdd-25c72ddb46f8.roa (raw, json)
Hash identifier:          2whKKZrw/fGuaEwg96oquG38MCA3CJCDllEKwGspB1k=
Subject key identifier:   B6:10:82:73:E5:BE:3A:3A:F2:39:13:9F:B1:8B:21:BC:BC:41:76:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B118C5773577E427E3D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431fd362-0df8-3142-bfdd-25c72ddb46f8.roa
Signing time:             Tue 24 Mar 2026 15:44:59 +0000
ROA not before:           Tue 24 Mar 2026 15:44:59 +0000
ROA not after:            Mon 22 Jun 2026 15:44:59 +0000
asID:                     211369
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:18:c5:77:35:77:e4:27:e3:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:59 2026 GMT
            Not After : Jun 22 15:44:59 2026 GMT
        Subject: CN=c653f939-74e1-4f29-9a73-0ecb67de04f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:77:75:fc:e7:de:22:72:8d:4f:c1:9c:16:
                    c0:e3:b7:c1:6b:a0:88:32:48:94:5e:a9:14:56:34:
                    83:d8:62:6a:86:4a:56:e4:bf:e7:86:83:99:76:c6:
                    10:bd:bc:26:10:bb:6c:72:36:e7:85:d2:a1:13:be:
                    46:a1:71:15:49:b2:84:81:d7:80:2a:3a:e7:e6:79:
                    f7:c0:9a:98:78:59:1f:7d:59:61:84:29:56:55:22:
                    c5:a5:11:51:82:f6:d3:52:ce:8c:b9:25:16:fe:a8:
                    39:0b:bf:01:ed:71:1f:6f:d9:92:1e:8e:2a:4e:4c:
                    6b:c3:f8:27:2f:b8:96:9e:7c:77:9c:ed:17:23:64:
                    fb:14:35:7d:cd:23:74:fd:6b:5b:d2:9d:de:01:e0:
                    25:9c:d4:12:d6:b4:89:85:d6:22:71:91:36:f1:f8:
                    c1:91:b6:c8:74:48:34:70:a4:77:fd:10:8c:86:70:
                    dd:0f:d0:15:d4:b3:a1:02:54:9c:db:ac:45:27:5d:
                    e9:1a:61:db:7f:4f:1f:13:bc:8a:48:e9:86:a3:25:
                    39:7c:39:fd:1d:4c:84:65:ab:58:3a:5b:3f:b8:5b:
                    8c:2d:d7:6c:79:1e:07:a7:49:0e:76:cd:31:8b:fc:
                    71:76:c1:2f:96:91:7b:db:b1:3c:f8:29:59:50:07:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:82:73:E5:BE:3A:3A:F2:39:13:9F:B1:8B:21:BC:BC:41:76:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/431fd362-0df8-3142-bfdd-25c72ddb46f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:70:cd:df:d9:40:b8:42:ad:b6:3c:56:c5:d1:cc:31:5b:
         bd:20:ab:41:4e:46:7c:09:50:e5:13:1a:cf:7b:fc:3b:ed:3a:
         e3:a6:40:6d:dd:08:24:47:0b:10:35:46:62:8c:e8:fb:0c:4b:
         f6:84:a8:e0:d0:b0:7d:7b:cf:de:d6:88:ad:c4:39:7a:08:bd:
         8f:8d:b5:af:0a:c5:27:00:8c:de:ec:30:00:88:02:6b:b3:08:
         0f:18:6a:fb:a8:8c:c0:6a:d5:75:7d:17:dd:82:77:0d:4f:ac:
         ff:ba:37:f2:1f:f8:8f:11:97:b5:2e:10:40:ee:6d:d8:67:b3:
         a0:aa:ee:15:f7:00:56:fa:04:9d:31:aa:70:8f:56:99:51:52:
         fa:e6:3d:23:5d:11:e7:7f:bc:77:18:09:ea:4f:3c:c3:d4:fd:
         12:91:95:39:af:81:0e:a3:7d:37:61:ec:fa:50:58:a5:dc:fc:
         58:c8:17:64:8e:38:d7:23:a3:4f:b2:d1:0f:4e:ca:98:cc:ed:
         7b:73:48:b1:ae:78:55:55:8e:d9:03:4a:aa:14:5c:5c:fa:dd:
         57:c4:be:83:3d:e1:f3:27:5c:72:e9:c8:c2:7d:73:5f:25:8c:
         fa:8f:bb:03:b6:ad:87:8d:2a:6f:40:15:a0:75:eb:d9:fb:6b:
         33:1f:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:42 2026 by rpki-client